From 3f7ac0949dba2f22a4889ab9df5e6a8628f0094b Mon Sep 17 00:00:00 2001 From: Stephan Schroevers Date: Fri, 24 May 2024 11:37:17 +0200 Subject: [PATCH] Allow OpenSSF Scorecard analysis to access `api.scorecard.dev` --- .github/workflows/openssf-scorecard.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/openssf-scorecard.yml b/.github/workflows/openssf-scorecard.yml index c5567b0d8f..083a6ea7cf 100644 --- a/.github/workflows/openssf-scorecard.yml +++ b/.github/workflows/openssf-scorecard.yml @@ -28,6 +28,7 @@ jobs: allowed-endpoints: > api.github.com:443 api.osv.dev:443 + api.scorecard.dev:443 api.securityscorecards.dev:443 fulcio.sigstore.dev:443 github.com:443